Untitled

 avatar
unknown
plain_text
a year ago
5.6 kB
3
Indexable
:000> uf kool_ade!FileMove
kool_ade!FileMove:
00007ffa`ff92d760 48895c2408      mov     qword ptr [rsp+8],rbx
00007ffa`ff92d765 4889742410      mov     qword ptr [rsp+10h],rsi
00007ffa`ff92d76a 57              push    rdi
00007ffa`ff92d76b 4881ec70010000  sub     rsp,170h
00007ffa`ff92d772 488bda          mov     rbx,rdx
00007ffa`ff92d775 488bf9          mov     rdi,rcx
00007ffa`ff92d778 488bcb          mov     rcx,rbx
00007ffa`ff92d77b 488d542420      lea     rdx,[rsp+20h]
00007ffa`ff92d780 418bf0          mov     esi,r8d
00007ffa`ff92d783 ff1537910500    call    qword ptr [kool_ade!Gs::SharedMemUnlock+0xc1f0 (00007ffa`ff9868c0)]
00007ffa`ff92d789 85c0            test    eax,eax
00007ffa`ff92d78b 757c            jne     kool_ade!FileMove+0xa9 (00007ffa`ff92d809)  Branch

kool_ade!FileMove+0x2d:
00007ffa`ff92d78d b800400000      mov     eax,4000h
00007ffa`ff92d792 6685442426      test    word ptr [rsp+26h],ax
00007ffa`ff92d797 7470            je      kool_ade!FileMove+0xa9 (00007ffa`ff92d809)  Branch

kool_ade!FileMove+0x39:
00007ffa`ff92d799 ba2f000000      mov     edx,2Fh
00007ffa`ff92d79e 488bcf          mov     rcx,rdi
00007ffa`ff92d7a1 e83c200500      call    kool_ade!Gs::SharedMemUnlock+0x5112 (00007ffa`ff97f7e2)
00007ffa`ff92d7a6 4885c0          test    rax,rax
00007ffa`ff92d7a9 7535            jne     kool_ade!FileMove+0x80 (00007ffa`ff92d7e0)  Branch

kool_ade!FileMove+0x4b:
00007ffa`ff92d7ab 8d505c          lea     edx,[rax+5Ch]
00007ffa`ff92d7ae 488bcf          mov     rcx,rdi
00007ffa`ff92d7b1 e82c200500      call    kool_ade!Gs::SharedMemUnlock+0x5112 (00007ffa`ff97f7e2)
00007ffa`ff92d7b6 4885c0          test    rax,rax
00007ffa`ff92d7b9 7525            jne     kool_ade!FileMove+0x80 (00007ffa`ff92d7e0)  Branch

kool_ade!FileMove+0x5b:
00007ffa`ff92d7bb 488d542460      lea     rdx,[rsp+60h]
00007ffa`ff92d7c0 488bcb          mov     rcx,rbx
00007ffa`ff92d7c3 482bd3          sub     rdx,rbx
00007ffa`ff92d7c6 66660f1f840000000000 nop word ptr [rax+rax]

kool_ade!FileMove+0x70:
00007ffa`ff92d7d0 0fb601          movzx   eax,byte ptr [rcx]
00007ffa`ff92d7d3 88040a          mov     byte ptr [rdx+rcx],al
00007ffa`ff92d7d6 488d4901        lea     rcx,[rcx+1]
00007ffa`ff92d7da 84c0            test    al,al
00007ffa`ff92d7dc 75f2            jne     kool_ade!FileMove+0x70 (00007ffa`ff92d7d0)  Branch

kool_ade!FileMove+0x7e:
00007ffa`ff92d7de eb4e            jmp     kool_ade!FileMove+0xce (00007ffa`ff92d82e)  Branch

kool_ade!FileMove+0x80:
00007ffa`ff92d7e0 4c8bc8          mov     r9,rax
00007ffa`ff92d7e3 488d15cad00500  lea     rdx,[kool_ade!GS_IS_6010_6323264+0xb64 (00007ffa`ff98a8b4)]
00007ffa`ff92d7ea 4c8bc3          mov     r8,rbx
00007ffa`ff92d7ed 488d4c2460      lea     rcx,[rsp+60h]
00007ffa`ff92d7f2 e8299affff      call    kool_ade!WebdatDebugStr+0xe0 (00007ffa`ff927220)
00007ffa`ff92d7f7 488d542420      lea     rdx,[rsp+20h]
00007ffa`ff92d7fc 488d4c2460      lea     rcx,[rsp+60h]
00007ffa`ff92d801 ff15b9900500    call    qword ptr [kool_ade!Gs::SharedMemUnlock+0xc1f0 (00007ffa`ff9868c0)]
00007ffa`ff92d807 eb25            jmp     kool_ade!FileMove+0xce (00007ffa`ff92d82e)  Branch

kool_ade!FileMove+0xa9:
00007ffa`ff92d809 488d542460      lea     rdx,[rsp+60h]
00007ffa`ff92d80e 488bcb          mov     rcx,rbx
00007ffa`ff92d811 482bd3          sub     rdx,rbx
00007ffa`ff92d814 0f1f4000        nop     dword ptr [rax]
00007ffa`ff92d818 0f1f840000000000 nop     dword ptr [rax+rax]

kool_ade!FileMove+0xc0:
00007ffa`ff92d820 0fb601          movzx   eax,byte ptr [rcx]
00007ffa`ff92d823 88040a          mov     byte ptr [rdx+rcx],al
00007ffa`ff92d826 488d4901        lea     rcx,[rcx+1]
00007ffa`ff92d82a 84c0            test    al,al
00007ffa`ff92d82c 75f2            jne     kool_ade!FileMove+0xc0 (00007ffa`ff92d820)  Branch

kool_ade!FileMove+0xce:
00007ffa`ff92d82e 4533c0          xor     r8d,r8d
00007ffa`ff92d831 488d542460      lea     rdx,[rsp+60h]
00007ffa`ff92d836 85f6            test    esi,esi
00007ffa`ff92d838 488bcf          mov     rcx,rdi
00007ffa`ff92d83b 410f95c0        setne   r8b
00007ffa`ff92d83f 4183c002        add     r8d,2
00007ffa`ff92d843 ff15c78a0500    call    qword ptr [kool_ade!Gs::SharedMemUnlock+0xbc40 (00007ffa`ff986310)]
00007ffa`ff92d849 85c0            test    eax,eax
00007ffa`ff92d84b 7407            je      kool_ade!FileMove+0xf4 (00007ffa`ff92d854)  Branch

kool_ade!FileMove+0xed:
00007ffa`ff92d84d b801000000      mov     eax,1
00007ffa`ff92d852 eb20            jmp     kool_ade!FileMove+0x114 (00007ffa`ff92d874)  Branch

kool_ade!FileMove+0xf4:
00007ffa`ff92d854 ff15f68a0500    call    qword ptr [kool_ade!Gs::SharedMemUnlock+0xbc80 (00007ffa`ff986350)]
00007ffa`ff92d85a 8bc8            mov     ecx,eax
00007ffa`ff92d85c e8ef150000      call    kool_ade!ErrWindows (00007ffa`ff92ee50)
00007ffa`ff92d861 4c8bc3          mov     r8,rbx
00007ffa`ff92d864 488d0d55d00500  lea     rcx,[kool_ade!GS_IS_6010_6323264+0xb70 (00007ffa`ff98a8c0)]
00007ffa`ff92d86b 488bd7          mov     rdx,rdi
00007ffa`ff92d86e ff15b4930500    call    qword ptr [kool_ade!Gs::SharedMemUnlock+0xc558 (00007ffa`ff986c28)]

kool_ade!FileMove+0x114:
00007ffa`ff92d874 4c8d9c2470010000 lea     r11,[rsp+170h]
00007ffa`ff92d87c 498b5b10        mov     rbx,qword ptr [r11+10h]
00007ffa`ff92d880 498b7318        mov     rsi,qword ptr [r11+18h]
00007ffa`ff92d884 498be3          mov     rsp,r11
00007ffa`ff92d887 5f              pop     rdi
00007ffa`ff92d888 c3              ret
Editor is loading...
Leave a Comment